PT-2018-18676

Name of the Vulnerable Software and Affected Versions Vecna VGo Robot versions prior to 3.0.3.52164 Description An issue exists where an attacker on an adjacent network could perform command injection. Recommendations For versions prior to 3.0.3.52164, update to version 3.0.3.52164 or later to...

PT-2018-18671

Name of the Vulnerable Software and Affected Versions Vecna VGo Robot versions prior to 3.0.3.52164 Description An issue exists where an attacker may be able to capture firmware updates through the adjacent network. Recommendations For versions prior to 3.0.3.52164, update to version 3.0.3.52164 ...

CVE-2018-0249

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0247

The CVE-2018-0247 entry describes an authentication bypass in Web Authentication (WebAuth) clients used by Cisco IOS on Cisco Aironet Access Points and Wireless LAN Controllers (WLCs). Affected configurations require: AP in FlexConnect NAT mode, WLAN in central switching (unique IP per client), A...

Cisco Wireless LAN Controller and Aironet Access Points IOS WebAuth Client Authentication Bypass Vulnerability

A vulnerability in Web Authentication WebAuth clients for the Cisco Wireless LAN Controller WLC and Aironet Access Points running Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic. The vulnerability is due to incorrect implementation of...

Design/Logic Flaw

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core fil...

CVE-2018-5518

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core fil...

CVE-2018-5518

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core fil...

CVE-2018-0235: Improper Input Validation

A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to incomplete input...

PT-2018-8690

Name of the Vulnerable Software and Affected Versions: Cisco Wireless LAN Controller version 8.5.103.0 Description: A vulnerability in the 802.11 frame validation functionality could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a...

PT-2018-8699

Name of the Vulnerable Software and Affected Versions: Cisco Aironet 1560 Series Access Points Cisco Aironet 1800 Series Access Points Cisco Aironet 1810 Series OfficeExtend Access Points Cisco Aironet 1810w Series Access Points Cisco Aironet 1815 Series Access Points Cisco Aironet 1830 Series...

CVE-2018-0249: Improper Input Validation

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0250: Protection Mechanism Failure

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

PT-2018-8700

Name of the Vulnerable Software and Affected Versions: Cisco Aironet 1560 Series Access Points affected versions not specified Cisco Aironet 1810 Series OfficeExtend Access Points affected versions not specified Cisco Aironet 1810w Series Access Points affected versions not specified Cisco Airone...

Vecna VGo Robot Information Disclosure Vulnerability

VGo is a new productivity improvement solution that allows individuals to replicate themselves in distant locations and move around freely as if they were there. An information disclosure vulnerability exists in versions prior to Vecna VGo Robot 3.0.3.52164, which can be exploited by an attacker ...

CVE-2018-0257

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

CVE-2018-0241

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of UDP broadcast packets that are forwarded to an IP...

CVE-2018-0257: Undefined Security Weakness

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the incorrect handling of...

Cisco IOS XR Software UDP Broadcast Forwarding Denial of Service Vulnerability

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of UDP broadcast packets that are forwarded to an IP...

PT-2018-8705

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers affected versions not specified Description: A vulnerability in the software could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affecte...